Author Archives: Kevin Townsend
Inside GCHQ’s Proposed Backdoor Into End-to-End Encryption
The Open Technology Institute (OTI) has responded to GCHQ/NCSC’s article on ‘Principles for a More Informed Exceptional Access Debate’ with an ‘Open Letter to GCHQ on the Threats Posed by the Ghost Proposal’.
read more
Continue reading Inside GCHQ’s Proposed Backdoor Into End-to-End Encryption
Public Exposure of Sensitive Files on the Internet is Getting Worse
2.3 billion files are currently exposed and accessible through misconfigured network-attached storage (NAS) devices, FTP and rsync servers, and Amazon S3 buckets to anyone on the internet. That’s 750 million more than 12 months ago, and despite Amazon’… Continue reading Public Exposure of Sensitive Files on the Internet is Getting Worse
Industry is Not Prepared for the IIoT Attacks that Have Already Begun
Industrial Internet of Things (IIoT) is an essential part of business transformation and the Industry 4.0 revolution. Its use is burgeoning, with more than 7 billion devices in use worldwide. This is expected to grow to more 20 billion by 2025 — and d… Continue reading Industry is Not Prepared for the IIoT Attacks that Have Already Begun
Analysis Shows Poor GDPR Compliance in European Websites
Marking the one-year anniversary of GDPR coming into force (May 25, 2018), a web-scanning service has analyzed the visible GDPR compliance of the 100 most popular websites in each of the 28 European member states. The scan is non-intrusive. As a result… Continue reading Analysis Shows Poor GDPR Compliance in European Websites
New APT10 Activity Detected in Southeast Asia
Researchers have detected what they believe to be new activity from Chinese cyber espionage group, APT10. The activity surfaced in the Philippines and shares similar tactics, techniques, and procedures (TTPs) and code associated with APT10.
read more
… Continue reading New APT10 Activity Detected in Southeast Asia
Research Shows Twitter Manipulation in Weeks Before EU Elections
This is an age of large scale political social engineering through social media, both by advertising and the presentation of misleading data. International social engineering became frontpage news with the 2016 US presidential elections, but has not ab… Continue reading Research Shows Twitter Manipulation in Weeks Before EU Elections
Georgia Supreme Court Rules that State Has No Obligation to Protect Personal Information
Almost exactly one year after the stringent European General Data Protection Regulation came into effect (May 25, 2019), the Supreme Court of the state of Georgia has ruled (May 20, 2019) that the state government does not have an inherent obliga… Continue reading Georgia Supreme Court Rules that State Has No Obligation to Protect Personal Information
Researcher Drops 3 Separate 0-Day Windows Exploits in 24 Hours
SandboxEscaper, the security researcher who posted a claimed zero-day Windows 10 vulnerability on GitHub Tuesday, has now posted the remaining four exploits (two yesterday and the final two today) that he or she (we’ll say ‘she’) said she possessed.&nb… Continue reading Researcher Drops 3 Separate 0-Day Windows Exploits in 24 Hours
Moody’s Downgrades Equifax Outlook to Negative Over 2017 Data Breach
Moody’s has revised its Equifax outlook from stable to negative, citing the effect of the 2017 data breach. This is the first time that a cybersecurity incident has resulted in a Moody’s outlook downgrading.
read more
Continue reading Moody’s Downgrades Equifax Outlook to Negative Over 2017 Data Breach